Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: 1Cf1zQR8Xs/3hPUXBrMpKOE2rj7q4seIBFzYrhSl4lc=
Subject key identifier: 3A:9A:8A:49:14:F5:B9:9C:0D:02:B1:2C:9A:E6:46:24:EC:79:F7:00
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 019CAC7DF8F5AAD8D6564B4D611B883552B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 05B2
Signing time: Mon 02 Mar 2026 03:01:02 +0000
Manifest this update: Mon 02 Mar 2026 03:01:02 +0000
Manifest next update: Tue 03 Mar 2026 03:01:02 +0000
Files and hashes: 1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: rIR1cBhM8i3ZcpfPUILjdP8E2qkLGi+faAub3olBcWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f8:f5:aa:d8:d6:56:4b:4d:61:1b:88:35:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Mar 2 03:01:02 2026 GMT
Not After : Mar 3 03:01:02 2026 GMT
Subject: CN=3a9a8a4914f5b99c0d02b12c9ae64624ec79f700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:5c:dc:6c:85:f3:17:6e:4a:a5:e1:d5:be:
ac:0a:cc:20:66:e5:3e:50:c8:1b:d0:fe:5c:f9:3f:
33:3c:b5:10:40:50:3a:8e:60:74:7b:9b:6b:52:e6:
20:cf:73:fa:bb:29:5e:e3:bd:8b:b0:d7:a9:b0:61:
ea:db:d4:fb:ec:18:1f:b9:40:f8:d0:27:b9:62:98:
ff:83:20:11:51:f1:87:9b:66:56:1e:85:45:5a:fb:
b6:a5:00:26:e7:b6:c4:9a:9e:d3:cc:86:70:17:b1:
50:70:8a:22:0f:7d:4e:f0:9e:c7:68:1e:35:64:6a:
df:16:40:8f:30:80:84:91:16:0b:78:31:8b:19:e3:
91:90:83:77:f2:ce:8d:96:dd:75:ec:53:29:b0:50:
8b:2f:0f:c8:a6:ad:e0:b5:00:12:79:df:96:40:73:
19:15:09:e6:ec:1d:35:82:5b:a7:24:91:4a:c9:76:
fe:4b:8c:5b:aa:c6:92:d2:71:e9:15:52:53:23:86:
f7:fa:5f:30:a7:e8:f5:bb:19:b2:21:e1:47:89:e7:
2a:6c:38:07:40:05:3c:ff:71:06:b5:ba:5e:f7:f2:
ab:b6:df:d6:1c:26:96:50:b1:33:5f:25:fc:ed:78:
75:b6:a0:fe:93:fd:a6:b0:a6:5a:ff:b9:5c:e8:ac:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:8A:49:14:F5:B9:9C:0D:02:B1:2C:9A:E6:46:24:EC:79:F7:00
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:42:a6:f7:b7:ad:5f:a2:7a:32:23:d2:ca:cf:f5:f4:ee:98:
f9:fb:15:f3:18:28:8b:60:22:28:ed:be:3a:b6:3c:c5:02:fc:
8b:d0:1e:99:6f:6e:b9:a0:fd:87:cb:e2:ff:98:39:47:13:5b:
e7:bb:4a:70:8a:f3:c5:a5:65:90:90:e2:c5:b3:ca:ec:c9:bc:
9b:06:55:6e:1a:b3:a8:32:5b:fb:fc:7c:aa:ed:1e:da:20:85:
50:88:a6:8d:da:80:38:77:71:a7:50:ec:b3:3a:8c:f1:5a:d1:
17:d5:e6:fe:2d:65:92:86:d1:0b:52:4d:39:cb:0f:d4:21:6d:
24:5e:3d:d8:fb:54:46:9a:13:12:1d:cd:12:1e:b5:17:34:e3:
e5:0b:4b:13:3b:d8:d2:ad:78:c5:bc:b3:a2:e3:73:fc:9a:57:
9a:0e:b1:03:d1:2a:69:e9:85:f1:30:d7:6c:a7:4a:2b:23:07:
b8:45:93:65:b5:aa:64:df:9d:bb:c1:47:c1:99:54:d0:01:07:
94:ad:ac:6e:31:96:b5:06:39:e1:35:5d:4d:48:58:58:56:0b:
a6:16:b5:9e:e3:48:d4:9c:55:9e:1b:63:c3:df:22:31:05:11:
eb:bd:fd:68:30:74:69:78:1a:54:15:ee:bf:0e:24:e0:9d:a7:
16:80:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:14 2026 by rpki-client